{ mkShell
, sops-import-keys-hook
, ssh-to-pgp
, sops-init-gpg-key
, sops
, pkgs
}:

mkShell {
  sopsPGPKeyDirs = [
    "./machines/secrets/keys/hosts"
    "./machines/secrets/keys/users"
  ];

  nativeBuildInputs = [
    ssh-to-pgp
    sops-import-keys-hook
    sops-init-gpg-key
    sops
    pkgs.python310Packages.grip
  ];
}